Privacy policy
Limely (the "Service") is a service for planning your days, offered on the web and as Android and iOS apps. Its operator (the "Operator") handles your information as follows.
1. What we collect
- Your account: email address, password (stored only in a form that cannot be turned back, so the Operator cannot see it), display name and icon picture
- What you enter: calendars, entries and shifts, shift patterns, attendance records (clocking in and out), settings such as hourly pay, memos and their files, health records (weight, meals, workouts), labels and settings
- Sharing: the members of calendars you share and their roles, invitations, requests to join, answers to requests to confirm, and the history of changes. On shared attendance calendars: shift wishes, requests to correct records, and the pay, tags and notes managers set
- Notifications: the address your device receives push notifications at, your time zone and language
- Use of the Service: counts of actions over short periods (to prevent abuse), errors and failed notifications, and records of accounts being made or deleted. The servers of our hosting and database providers also record IP addresses and browser types
- On your device: whether you are signed in, your settings and recent choices. The iOS app keeps your entries from this month to a little past the end of next month on the device for its widgets, and a key with which its memo widget ticks checklist items (the server keeps only what checks that key, and forgets it when you sign out)
- Purchases: whether you have the paid plan (Limely Plus), which product, until when and whether it renews. Apple handles payment; the Operator never receives card numbers or the like
- Ads (the iOS app): the ad provider receives device and app information, your IP address and records of ads shown and tapped. The advertising identifier (IDFA) is used only if you allow tracking (see section 11)
We do not collect your location, contacts or photos (other than files you attach). What you enter (calendars, entries, memos, health records and so on) is never used for ads or given to the ad provider.
2. Why we use it
- To provide the Service (saving, syncing between devices, showing and sharing)
- To send notifications (entries, shifts, changes by people you share with)
- To provide the paid plan (Limely Plus) and confirm purchases
- To show ads (the iOS app; none while you have Limely Plus)
- To send emails for signing in, confirming an account or resetting a password
- To prevent abuse and keep the Service safe
- To find and fix problems and improve the Service (counted without identifying anyone)
- To answer your questions and tell you of important changes
3. Giving information to others
We do not give personal information to third parties unless you agree or the law requires it.
When you share a calendar, the people you share it with see what you share (your display name, icon, entries, memos and so on).
4. Providers working for us
The Service has providers in these roles store and send information for it, each under its own terms and on the Service's behalf:
- Database, sign-in and file storage (a provider in the United States)
- Serving the website and sending notifications (a provider in the United States)
- Sending account emails such as sign-up confirmations and password resets (a provider in the United States)
- Confirming and managing purchases in the app (a provider in the United States)
- Push services (Apple, Google, Mozilla and others, as your device or browser uses): delivering notifications. The web version encrypts their content, so the push service cannot read it. The iPhone app's notifications are handed to Apple's push service (APNs) with the text they show and your device's address
- Distributing the apps and taking payment for purchases in them (App Store, Google Play), under their own privacy policies
Ads in the iOS app are served by the ad provider, which receives information directly from your device (see section 11).
5. Providers outside Japan, and their laws
Most of these providers are in the United States, and your information may be handled on servers outside Japan (in the United States and elsewhere).
The United States has no comprehensive federal privacy law like Japan's Act on the Protection of Personal Information; personal information is protected by federal laws for particular fields and by state laws (such as the California Consumer Privacy Act). Japan's Personal Information Protection Commission publishes surveys of other countries' privacy laws.
The Operator uses these providers having confirmed that they encrypt data in transit and at rest and control access to it.
6. How long we keep it
When you delete your account, its data and files are deleted. Entries and memos you wrote on someone else's calendar stay with that calendar, without your name.
Counts of actions and error records are kept only as long as needed. Removal from backups can take a few more weeks.
7. Keeping it safe
- Policy: personal information is handled as this policy says
- Rules: how information is collected, used, kept and deleted is decided, and followed
- People: the Service is run by one person, the only one who handles personal information or can enter its admin screens
- Physical: information is kept in the providers' data centres; the Operator's own devices are protected by screen locks and the like
- Technical: every connection is encrypted (HTTPS); the database decides, row by row, who may read or change data; passwords are stored only in a form that cannot be turned back; bursts of actions are limited; deleting an account asks for the password again
- Outside Japan: as providers in the United States are used, these measures are taken knowing the privacy laws there
8. Seeing, correcting and deleting your information
You can change or delete your display name, icon and everything you entered in the app at any time, and delete your account in Settings › Edit profile › Delete account.
To ask for anything else (the purposes of use, disclosure including records of giving data to others, correction, addition, deletion, stopping its use or its provision to others), write to the address below. We will confirm it is you, for example by your writing from the address you signed up with, and respond without delay as the law requires. There is no fee.
9. If a leak happens
If personal information leaks or may have leaked, we will find the cause, stop it from spreading, tell the people affected, and report to Japan's Personal Information Protection Commission where the law requires.
10. Health records
Health records (weight, meals, workouts and so on) are not seen by other users and are never shared. They are used only to provide the Service, never for ads, and are never given to the ad provider. The Service never asks for sensitive information such as medical history.
11. What leaves your device
The web version talks only to the Service's own servers (run by the providers in section 4) and uses no outside tags for ads or analytics. The iOS app sends information directly from your device to these companies (published as Japan's Telecommunications Business Act requires):
- Google LLC (serving ads, AdMob): device type, OS, language and similar information, IP address, app information, records of ads shown and tapped, and the advertising identifier (only if you allow tracking); to serve ads, measure them and prevent fraud. Nothing is sent while you have Limely Plus
- RevenueCat, Inc. (managing purchases in the app): your account's ID (a random string, without your email or name), purchase records (product, period, App Store transaction number), device type, OS and app version; to confirm purchases and turn Limely Plus on
- Apple Inc. (App Store): to process purchases in the app, under Apple's privacy policy
You can withdraw permission to track at any time in your iPhone's Settings › Privacy & Security › Tracking; ads are then not based on your interests. To see no ads at all, use Limely Plus.
To receive notifications, your device or browser talks to its own push service.
12. Minors
If you are a minor, please use the Service with a parent's or guardian's consent.
13. Changes to this policy
We announce changes on this page, and important ones in the app too.
Operator
The operator of Limely (an individual)
The operator's name and address are given without delay on request.
Contact: support@getlimely.com